CVE-2026-102026
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-664
Impact
An adjacent eBGP peer can repeatedly crash the routing protocol daemon (rpd), causing a complete denial of service for network routing. The attacker only needs an established eBGP session to send a malformed route update when RIB sharding is active.
Root cause
The routing protocol daemon fails to properly manage resource lifetimes during BGP route updates when RIB sharding is enabled.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved release specified in Juniper advisory JSA112187. As a temporary workaround, disable RIB sharding under the routing options configuration hierarchy.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.